CVE-2025-52568CWE-20CWE-770

NeKernal Multiple Memory Corruption Vulnerabilities in mkfs.hefs

High · published June 24, 2025

CVSS v4.0
8.8
EPSS
1%
Percentile
43.9
In the wild
Unconfirmed
What it is

NeKernal is a free and open-source operating system stack. Prior to version 0.0.3, there are several memory safety issues that can lead to memory corruption, disk image corruption, denial of service, and potential code execution. These issues stem from unchecked memory operations, unsafe typecasting, and improper input validation. This issue has been patched in version 0.0.3.

The record
Technical detail
CVSS v4.0
8.8 · HIGH
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.00529 · 43.9th percentile
Weaknesses
CWE-20 · Improper Input Validation; CWE-770 · Allocation of Resources Without Limits or Throttling
Published
2025-06-24T03:06Z
EPSS history
Timeline
  • 24 JUN 03:06Z
    NeKernal Multiple Memory Corruption Vulnerabilities in mkfs.hefs
    cvelistv5